Privacy Policy

Who we are

Shira is an e-commerce platform that lets merchants in the Syrian and Arab market create an online store and receive orders. Depending on how you use the Services, you may be a merchant (store owner or staff) or a customer buying from a merchant’s storefront. For questions about this policy, contact us at [email protected].

Information we collect

We collect the following, depending on how you use the Services:

• Account information — your name, email address, and phone number (used to sign in via a one-time code).
• Merchant / store information — store name, contact details, business information, and the payment and shipping settings you enter.
• Order and customer information — when a customer places an order on a merchant storefront: name, phone number, delivery address, and order contents.
• Payment information — processed by our payment providers; we do not store full card numbers. Cash-on-delivery and bank or wallet transfers are recorded only as the chosen method.
• Mobile app and device data — device model, operating system, app version, and a push-notification token. Biometric unlock (Face ID / fingerprint) is handled by your device and is never transmitted to us.
• Content you provide — product images you upload from your camera or photo library, only when you choose to.
• Usage and technical data — IP address, pages viewed, a first-party storefront visitor identifier for basic analytics, cookies needed to sign in, and diagnostic and error data.

How we use your information

• Provide and operate the Services — accounts, storefronts, orders, and the mobile app.
• Authenticate you with one-time codes, keep accounts secure, and prevent fraud and abuse.
• Send the transactional messages you would expect — sign-in codes, order confirmations, and order alerts — by email, push notification, and, where available, SMS.
• Process payments and support order fulfilment and delivery.
• Maintain, troubleshoot, and improve the Services using diagnostics and aggregate analytics.
• Comply with legal, tax, and accounting obligations.

How we share information

We do not sell your personal data and we do not use it for third-party advertising. We share information only as follows:

• Between a merchant and their customer — completing an order shares the customer’s contact and delivery details with that merchant, and the merchant’s contact details with the customer, so the order can be fulfilled.
• Service providers acting on our behalf — payment processing (Paymera and the other methods a merchant enables), transactional email (Amazon SES), hosting and network security (Hetzner in Germany, and Cloudflare), error monitoring (Sentry), and push-notification delivery (Expo, Apple APNs, and Google FCM). The app stores (Apple App Store and Google Play) process app downloads and updates.
• Legal and safety — when required by applicable law, or to protect the rights, property, or safety of Shira, our users, or the public.

Where your data is stored

Our servers are hosted in Germany (European Union), with encrypted backups on Cloudflare’s network. If you access the Services from Syria or another country, your information may be processed and stored outside your country of residence.

Data retention

We keep account and order data for as long as your account is active and as needed to provide the Services. Some records — such as order and transaction history — may be retained after an account is closed where needed to meet legal, tax, accounting, or dispute-resolution obligations, after which they are deleted or anonymised.

Your rights and choices

• Access and correct — view and update most of your account information directly in the portal or the mobile app.
• Delete — request deletion of your account and associated personal data from Account → Security in the app, or by contacting [email protected]. Some records may be retained where the law requires.
• Notifications — turn off non-essential push notifications in the app’s notification settings; essential messages such as sign-in codes are required to use the Services.

Security

We protect your data with encryption in transit (HTTPS/TLS), strict isolation between merchants, and access controls. No method of transmission or storage is completely secure, but we work to protect your information and to address any issues promptly.

Cookies and similar technologies

We use cookies that are necessary to sign you in and keep your session, and a first-party identifier that lets a merchant see basic, aggregate visitor analytics for their storefront. We do not use third-party advertising cookies or cross-site tracking.

Children

The Services are intended for merchants and adult customers and are not directed to children under 13. We do not knowingly collect personal information from children; if you believe a child has provided us with data, contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last updated” date above; we may also communicate significant changes in the app or by email.

Contact us

For any question or request about this policy or your personal data, contact us at [email protected].